cvs commit: ports/security/vuxml vuln.xml

[Stanislav Sedov]

On Thu, 19 Aug 2010 21:11:53 +0000 (UTC)
Niels Heinen <niels at FreeBSD.org> mentioned:

> niels       2010-08-19 21:11:53 UTC
> 
>   FreeBSD ports repository
> 
>   Modified files:
>     security/vuxml       vuln.xml 
>   Log:
>   - Document SLiM insecure PATH assignment issue
>   - Removed space from vlc title
>   
>   Approved by:    itetcu (implicit, mentor)
>   Security:       http://seclists.org/oss-sec/2010/q3/198
>   

<snip>

> | +  <vuln vid="68c7187a-abd2-11df-9be6-0015587e2cc1">
> | +    <topic>SLiM -- insecure PATH assignment</topic>

By convention, the first word in the title was always the package name
of an application.  I'm not sure if it is documented somewhere, but
it seems all other records follow that.

-- 
Stanislav Sedov
ST4096-RIPE